denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

ike: Do not cache MID of IKEv2 fragments

Browse Source 
This fails if there are unencrypted payloads before an encrypted
fragment payload in the first fragment.
This commit is contained in:
Tobias Brunner
2014-10-10 09:32:41 +02:00
parent c0f4936a23
commit 7a53fe5511
1 changed files with 3 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/libcharon/sa/ike_sa_manager.c
+3 -2
View File
@@ -1302,8 +1302,9 @@ METHOD(ike_sa_manager_t, checkout_by_message, ike_sa_t*,
ike_id = entry->ike_sa->get_id(entry->ike_sa); ike_id = entry->ike_sa->get_id(entry->ike_sa);
entry->checked_out = TRUE; entry->checked_out = TRUE;
if (message->get_first_payload_type(message) != PLV1_FRAGMENT) if (message->get_first_payload_type(message) != PLV1_FRAGMENT &&
{ message->get_first_payload_type(message) != PLV2_FRAGMENT)
{ /* TODO-FRAG: this fails if there are unencrypted payloads */
entry->processing = get_message_id_or_hash(message); entry->processing = get_message_id_or_hash(message);
} }
if (ike_id->get_responder_spi(ike_id) == 0) if (ike_id->get_responder_spi(ike_id) == 0)